Security & Compliance

Security & Compliance

Fully protected, high physical security
We take the protection of the information entrusted to us by our customers very seriously indeed.

We appreciate that many of the documents in our care may be confidential or sensitive in nature. For this reason, we have clearly auditable processes in place to safeguard confidentiality. All Transmedia employees are security vetted by an external company, CYS Online Ltd, and the importance of rigorous security practices is embedded in our corporate culture.

Fully documented procedures are in place for the collection and return of records or information held long term in our archival storage facility. We have the in-house technology and expertise to scan or convert any type of document or microform; all scanning and storage is carried out within a fully protected, high physical security environment. We do not subcontract work of any description.

Transmedia is registered with Data Protection, registration number Z5792230, and operates a Data Protection Code of Practice. In addition we are externally audited to BS7858:1996 Standards.

Secure transport and handling
Security is only as strong as its weakest link. For this reason files in our custody remain within our facility at all times. By using our own transport for the collection of hardcopy files we eliminate any risk of loss or damage by third party organisations.

When asked for a collection, we complete a collection slip through our workflow management system, which immediately issues a sequential job number for the collection. The collection slip includes all relevant details of the job and two copies are produced and given to the driver. When the documents have been collected the driver obtains a signature and date from an authorised person. One copy of the collection slip is returned to our office and one is left with the customer for their records.

The documents are then securely transported back to our facility. On arrival at our facility, the driver takes the documents to the goods inwards area and passes the collection slip onto production. The operator reviews the collection slip and checks that the details are correct in relation to the items found at the goods inwards area as well as against any inventory provided by the customer. When satisfied that everything is in order, they formally accept the job on our workflow management system.

A Job Registration Card is then printed, which will accompany the originals at all times until the job is complete. If any discrepancies are found, we contact the customer immediately for clarification.

Our workflow management system provides a full audit trail from quotation stage right through to completion and delivery of the job back to the customer. Once collected the data is delivered directly to our Swansea premises (no documents are left overnight in our vehicles). On arrival at our premises, data is immediately transferred into our file storage area. This is a fully protected environment in compliance with PD5454:2012 standards.

Secure archive storage
Transmedia offers three levels of security, each with a different cost structure. Dependent on the level of security required (e.g. if your records have not been previously scanned), we would strongly recommend storing all of your original documents to PD5454:2012 Standards, the recognised standard for archival storage of hardcopy-based records.

Secure data erasure
Transmedia provides data erasure services for computer memory/storage/cache. All data erasure is warranted in compliance with appropriate standards, and disposed of in accordance with HMG Infosec Standard No 5 (IS 5). File systems containing a customer’s data are wiped three times, with every sector overwritten with one pass of randomly generated data.

If required, we can adopt HMG IS5 Enhanced (equivalent to US DOD 5220.22-M): this entails every sector being over-written three times. Written confirmation that this procedure has been satisfactorily completed is supplied once the data is erased.

Certification/Accreditation currently held:

ISO9001:2015 - We were originally accredited to BS5750 in 1992 (the first image bureau in Europe to achieve this). We have updated this over the years and received accreditation to the revised Standard ISO 9001:2015 standard.

ISO27001:2013 - We have always followed best practices for information security but became fully accredited to ISO27001 in 2018.

BS15713 – Information destruction – we comply with this Standard and all services are carried out by Transmedia personnel from collection by our GPS tracked vehicles to the eventual confidential destruction on site at our premises.